pword is being hashed well, but can't verify it against db pword yet