add bcrypt, User model, Users controller