add encryption for password