update password hashing