changed password hashing to PHPass