passwords are now hased and salted