User.create({username: req.body.username, password: bcrypt.hashSync(req.body.password)})
  .then(() => res.status(201).send({message: "Created user."}))
  .catch(err => next(err));