adding bcrypt to encrypt password