found the problem, bcrypt is dumb