Fixed session hijacking issue
Now hashes the password and checks if it does match