switched hash method to password_hash