revised User creation, passwords are now encoded