added bcrypt to encrypt passwords