added hash and salt to passoword API route