We should send the password hash as given, don't rehash