add tip for script protect
store hashed version of the password in session and cookie ("remember me" function)