Changed to only storing password hashes