updates security do bcrypt and composer
merge fix