pwd hashing
fix login