remove extra dependency, hold chntpw to right version