hash password #09 fix