login moved to 256hash