So its not the password that is being provided, but an encrypted hash