hash the password
remove unused package