updated password creation to bcrypt with backwards compatible for old passord hashing md5