use bcrypt instead of bcryptjs

Refs #1