ditching passport for bcrypt, user authentication in beta now