added bcrypt authentication