add bcrypt to encrypt password