try hash+salt on user/pass