implemented password hashing, so passwords are no longer stored as text