expanded password field to contain sha256