use Bcrypt to build valid passwords