Adding password-compat as a dependency because it's used in the security config