Only checking local sources. + hashing with bcrypt