create account with password hash