encrypt password with random salt