feat(api): login password verification

WIP(api): session management

fix(api): check if user exists before hashing password on registration

feat(api): reimpl user registration