added secure password migration