user verify bug fix, login with bcrypt