Legacy hashed password are updated when the user logs in