sign up and sign in with bcrypt