making credentials a hash