fixed non static pwd hashing