Hash the password before it goes into the db. Never store in plaintext