finished login+registration (only hash/salt for pw remaining)