switched to bcryptjs