replace phpass with password