changed session create session and clarified a version of bcrypt