better scrypt/bcrypt handling