remove bcrypt, implemented login with pbkdf2 instead #4