finishes user auth with BCrypt