add hash for password with bcrypt