add bcrypt
add secure password