ok: bcrypt.compare rejects wrong password ok: bcrypt.compare accepts correct password DONE