more bcrypt removal