revisions to password hashing post