Strengthened pw hashing security

Changed hashing to evaluate it a couple more times.
Added new ToDo's
Fixed some minor changes, including $_POST[] variable names
corrections,...