add secure password to user