JavaScript : client side password encryption