add bcrypt to Gemfile.lock
write users migration