added bcrypt for password generation