bcrypt and comment validations