adding secure password to user