adds bycrypt salt and password
breaks things