added password hashing with Bcrypt