added password-hash and randomstring