Implement bcrypt instead of hash for passwords; will require user table to be blown away