ready for db hook to retrieve password hash