encrypt passwords (requires database update, does not work as is)