How come when you login to the forum your password is hashed, but when you go to auth it, you don't have the password hashed?

Isn't that a huge security risk?