change passwords to hashed passwords