require('bcrypt') to require('bcrypt-nodejs')
changed bcrypt dependency in package.json

switched to bcrypt-nodjs and hopefully locking it to the right commit