password hashing and decryption (1)