do not rehash password