add bcrypt to user model