validations plus
remove hashed_password and add secure_password
add cookies