password-hash added