entered passwords are now verified by hash comparison

Note that this change will effect all previous logins.