why was the login not hashed?!?!?