added bcrypt pw encryption