Changed the hook from `beforeCreate` to `beforeSave` With `beforeCreate` the password will not be hashed if it is changed later