performance improvements, removed bcrypt