removed dependency on bcrypt