persisting hashed password in db