Moved password hashing and state to hydration