now we hash passwords