added secure passwords to user model