now working with hashed passwords.