Feature/security

login, registration and forgot password changes
I'd planned to do this and using env variable for boostrap/login in a separate task.