user model

made login work with hash - yeah!