add bcrypt module and hash password before save to database