updated create profile to hash passwords on creation