use pure JavaScript bcrypt implementation