Hashed passwords and proper login validation working