testing password hashing