added hash_password callback for basic authentication