password hashing, closes issue #22