[bhayden]

> "bad guy" could just re-post the exact same hash and login anyway.

That's true, thanks for the response.