add BCrypt, update user model and schema