added password-hash to dependencies