use name for username
use pbkdf2 instead bcrypt