added attribute, flatten the password hash