depends on cart being in scope
update to package.json because installed bcrypt from bcrypt.node instructions for win64. Untested so far. Added pre to User to put save hashing there.