It would be better to use bcrypt, beause its more secure as it's slower (uses more computing cycles).
Your code could also be better:

You wouldn't need salt field in User model, because it's saved into the same field as password does.

For authentication, something like:

var mongoose = require('mongoose'),
  bcrypt = require('bcryptjs');

var userSchema = mongoose.Schema({
  email: String,

Is your enhancement request related to a problem? Please describe.
No

Describe the solution you'd like
A dark mode theme for the staff interface.

Describe alternatives you've considered
Can use alternative hacks but these often break notifications on some platforms.

Additional context
This would help with late night working whereas most OSs support dark mode for applic

Is your feature request related to a problem?

I want to be able to disable the sharing link for extra security

Describe the solution you'd like

A toggle to disable the sharing link in the sharing modal

Describe alternatives you've considered

Additional context

Thank you for your feature request – we love each and every one!

For now let's just show it, we don't want to make it editable until we have a better email verification flow.

This is the section we want to show it in:

Context

• This is part of release-1.5 #148
• MEDIUM priority task

Tasks

• Remove dependency bcrypt-nodejs in package.json
• Add dependency bcrypt in package.json
• Migrate file app/data/user-dao.js to bcrypt
• Validate the instalation with the local test
• Add and submit the chang