passwords are now encrypted