User passwords now encrypted, not plain text