Hash password and salt on update