password handling is insecure currently introduced [here](https://github.com/Vesalon/Flash/blob/766808737e59e79af1e951a78c41c5a22d9ff59b/flashweb/authentication/serializers.py)
