user data now encrypted/encoded and stored at client side