remove NPM bcrypt, moving to FE
moved to bcryptjs, maybe the pure JS guys got it right.