access: fix access_get_hashed() the '*' user handling