update login methods to use hashed passwords