switch to bcryptjs