user creation form
password hashing