correct bcrypt dependency
user auth and post association logic