now hashing passwords.
settings page allows user to change their password