work on Login via ES; ruby/python's bcrypt are not the same