bcrypt storage first pass