adding harden_password_check