changed userid encryption from sha1 to bcrypt