enabling bcrypt for password hashing