include hash and salt on login query