change hashPassword from SHA1 to SHA256