hash user passwords

resolves #37