adding bcrypt to package.json