some more changes; password hash not working yet