refactor auth because of bcrypt returns char list and not string