fix password re-hashing