add hash password to user model