Password refactor, adding a native bcrypt