merge for hashed passwords

I guess this is how this works.