adding password hashing to create user + change user password