Qube #1 lol, just looked and it appears the plain text password in cookies in indeed now hashed. Good news. When was that changed?