updated user authentication to have secure password