added pw hashing