It would be better to use bcrypt, beause its more secure as it's slower (uses more computing cycles).
Your code could also be better:

You wouldn't need salt field in User model, because it's saved into the same field as password does.

For authentication, something like:

var mongoose = require('mongoose'),
  bcrypt = require('bcryptjs');

var userSchema = mongoose.Schema({
  email: String,

When an agent mute/unmute the converstion, add an activity message "#{agent_name} has muted the conversation"

Currently our preflight/ endpoint is accessible at any time, even after the instance has already been correctly deployed. We should remove these routes after the app has been deployed (i.e. at least one user has been created in the instance), to avoid potentially leaking some information about the instance's setup (as we add more functionality to this page). To accomplish this,

• The `_prefligh

Is your feature request related to a problem? Please describe.
When a non technical user wants to customize the widget for requiring email upfront and showing agent availability they can't do it through the GUI.

Describe the solution you'd like
There should be a toggle for both requireEmailUpFront and showAgentAvailability in the https://github.com/papercups-io/papercups/blob/master/a

Context

• This is part of release-1.5 #148
• MEDIUM priority task

Tasks

• Remove dependency bcrypt-nodejs in package.json
• Add dependency bcrypt in package.json
• Migrate file app/data/user-dao.js to bcrypt
• Validate the instalation with the local test
• Add and submit the chang