encrypted password are now strings