minor set optimizations
pass decode_responses
do not define _hash* functions when not checking for passwords
minor cleanup