added bcrypt & created encrypted login via session