better fix for previous issue (password hash)