add BCrypt and Session