Instead of password only a hash is now stored in database