shoul encrypt password