comment about password hashing intention
fix wrong variable name
fix wrong comment syntax
guard against incomplete requests