user migration, model, and bcrypt