use bcrypt asynchronously