make user management more robust to avoid DB exceptions and rehashing
passwords that have already been hashed