encode before hitting bcrypt