upgraded passwords without hash to hashed version

i think it should check first if password is hashed already