https://mehdizenhari.com/blog/nodejs-password-hashing