req params and bcrypt