encoded password does not look like bcrypt