fixed: init crypto, bcrypt; compare hash password