Switched to BCrypt for password hashing