adding very basic authentication using bcrypt