complete authentication by backend , user can login and logout with jsonwebtoken token and cookies, also use hashing method