Password hashing function

[GriffinWilchuk]

passwords a currently stored as plain strings. this function adds much needed security.