I am using bcrypt to generate salts and hash passwords, but I do not think that it is doing it very sec