needed to add app::uses for password hasher