hashing user password with sha1