Accounts are in db with hashed passwords