basic crypto for passwrods, further generalization in REST api