password hash has problem