all the examples I’ve seen are roll your own with bcrypt/express