added password hash on login