bcrypt working, routes better