@jeffalo are emails bcrypt hashed as well?