add password encryption with bcrypt