bcrypt + hmac encryption for devise