store a password hash (continuing in User definition)