fixing multiple hash on user password, only happening on the new caused by external call