Update dependencies now that Webathena doesn't use DES.

CryptoJS is still needed for MD5 to compute gravatars, but we can use a
much smaller rollup file now.