Encrypt stored passcode

prevent user passcode being stored in plaintext, encrypt with AES256