fix password encryption on user creation