test password hashing