hash user's password

change password data length to MAX
hash password in login form & user reg form
fix form user reg