hashing password so it's not plain text in localstorage