Moving password hashing into schema