Bcrypt for password hashing and upgrade legacy logins