another small fix. enabled password hashing