added password hashing checks