troubleshooting bcrypt password validations