change password hash function from null to bcrypt