The admins can change passwords but not getting hashes from database