add bcrypt to authentication