added password authentication and downgraded version of bcrypt for gemfile