fixed password hash in users fixture