added password-hash