fixed password hashing formula