fixed hashing the password