tweaking and now bcrypt async