added BCrypt for encrypting client-side state