here’s how things will work:

• posts and user data will still be held in the json file, for api purposes

• passwords will be held on an private database, separate from the rest of the data