hash password insha1 on update