Add password hashing with PBKDF2, login form update
Update TODO