added bcrypt to package.json