before bcrypt changes