Fix password hashing