Secure user login with hash