create password hash with random salt to store