omit bcrypt since it's a Django dependency