working on bcrypt and sessions=