Passwords hash on update and proper error validation returned