add user password hash