set up BCrypt for user authentication 2