Fix passing of password hash inside session.