Use bcrypt for user's password.