password encryption, updateUser: bugfixes