remove bcrypt reference from authenticate, properly indented form