upgraded passwords without hash to hashed version

i think you can look for prefix `$2a$` in the password