for rails 3.1, disable xml. should be removed when merged with rails 3.2
CRYPTOPROVIDER environment variable (e.g. BCrypt). added Bace. closes gh-338