user can changing password and hash password to store in database