Fixed password hashing