removed bcrypt from User model for now