creating a new user with password hash