passwordHash + ajax login