hash passwords on update
auth, instagram, etc
merge