fixed bug wih escaping password before hashing it