fix hash passwords