think it is actually working now with add_secure_password