Unsetting the password before creating the new hash leads to invalid hashes