secured login with password hashing