utf-8 encoding added before hashing password, still not sure if correct