bcrypt and user fixes