encrypt password with bcrypt on password update