fixed login bug with hashing password