Associations and bcrypt practice