add bcrypt for password digesting