initial login auth using bcrypt-ruby