added bcrypt password encryption and login authorization