removed bcrypt dependency (no longer needed)