first pass at password encryption added to user object