fixed login password hash