update password hashing in user module