add bcrypt for user password