[TwistedWave]

The goal of hashing the passwords is to not store them in plaintext in the database, in case the server is compromised. In your case, an attacker doesn't need the password, the hash is enough to login.

[roel_v]

I suppose you mean "goal <...> is to not store them in plaintext"? I was confused there for a second.

[TwistedWave]

Indeed, thanks. I fixed it.