Fix vendorized lodash
Add support for SCRAM-SHA-1