encrypt password when creating user, login with encrypted password