added password hashing

all hail the mighty BCrypt, securer of apps