lock the version on bcrypt-ruby