now can login with hash