added password hashing, little header fix