change passwordHash from string -> to byte[]