bcrypt is fine for now