adding bcrypt for password hashing