hashed password might still have not been correct, fixed