do not check root user password hash... doh