hash password in registration, revamp comment