custom utils tested, including password encryption and checking