Bundle update, fix bcrypt dep