fixed Encryptor to return raw hash (without URL-sensitive character
replacement)