hash password when creating user & locataire