integrate bcrypt into auth,

I'm pretty sure the salt part is broken,
we'd need a node cryptanalyst to look at this.

for now, don't store the salt (as I believe we're not using it).

Signed-off-by: Niv Sardi <xaiki@evilgiggle.com>