implemented sha-256 password hash for authentication