made bcrypt difficulty dynamic renamed strategies to auth