encrypting passwords for users using bcrypt