Add db schema.
#1 hash passwords.
Don't email passwords.