user auth stuff, bcrypt, readme