make password changes automatically hashed

sure, there are different ways of user authentication. so this might need an extra process function in the model entity. but saving passwords as plain text is covering less the use cases of `Hash::make()` ones.