password hashing and management through api