encrypt password on user update