added hashed passwords and roles