working user login authentication with bcrypt