using CPasswordHelper for pass hashing and validation