spot import script fix

* asking for password input without echo
* renaming images to their hash digest