Fixed double password hashing