now using bcrypt-ruby auth