using a more secure password hashing tool