hashes password with SHA-256 algorithm