added hashing for credentials