rework logout and password hashing