change bcrypt to pwd(use crypto.pbkdf2)