auth should be working with bcrypt