use SHA2 to encrypt password
remove require statement