new schema.sql (with hashed passwords)
password hashing/salting