fixed bug where registering showed your hashed password