replace hash module with PasswordHash