update password encryption and redirects