removed TODO
add default password
session support
hardcode 'test'; we don't want to delete the 'real' database because of a stupid error
implement authentication
rename session methods