Passwords are being stored and validated with server side Hashing.

Hashing involves fixed key salting. Not good, must change to random keys for salting.