Passwords hashing needs to be done to maintain security which is not present in form login. We can also implement session based tokens later.