hack around bcrypt for now