set up BCrypt for user authentication