password hash exercises are a work in progress