added basic password hashing