Refactor patient model to store and compare passwords by hash, rather than plaintext