hash PASSWORD