bcrypt downgrade