trying to implement secure password hash