add password hash