added content_type,  password_(hash|verify), random_string