um asucktually, you forgot one important detail. you clearly forgot to account for the objective fact that wasteof.money hashes AND salts your password before it gets stored into the database (mongodb).