add password hashing :)