added user hash pass check