pwdbased working, hash tests pass