password wasn't hashed and sent to database fixed.