added hashes of passwords instead of plain text