pw hashed, login OK