add password security and hash