only storing hashed passwords
0.11.0