#3 encrypt password