Basic user validation with bcrypt