Added password hash logic on all API's, reset implemented