saving working, adding bcrypt for pw