Now the DB only stores the password hashes.