add check hash on reset pwd