is in the object so no need to pass it into this updateUserPasswordHash anymore