now working, remember to install password-hash