adding npm dependency manually to password hash