borrowed 3.2 serialize test with backwards-compat behavior down to 2.3
appraise latest + add bcrypt as test dependency
some (irreleant) code cleanup
copy - paste yet another coder serialization test from AR