adds bcrypt helper

we don't want to save plaintext passwords
add missing semicolon
generate new user and encrypt password
[tests] change urls url