fixes password: it was missing encode as SHA-256