bcypt: encrypt password when you create user or login