use bcrypt-user
remove stateless mode
release v1.0.0