added hashing and salting to passwords