adding password hashing spec