upgraded passwords without hash to hashed version