added password form and bcrypt