staff -> adding password encryption