encrypt user data before saving to db