hashing only passwords which are not already hashed