hash password & make email configurable

1. hash the password
2. add the email configuration in setting.py