registration included password hashing