client hashed password system