remove bcrypt. It is not used.
Relax active_model version for rails 4.0.x