added password-storage encryption