note for password hashing added