add a note about bcrypt in doc