remove password hash