Moved hashing of password from db.php to user.php