User login works, but pass isn't encrypted