double hash password
change password
fix auth login