added bcrypt for passwords