added password hash module to package.json