password hash fix