add pwdhack.py and update Total-merged-user-map