encrypt password with hmac