working on hash password