add secure password to User