modified not to create user with the same email
modified to hash password