upgrade bcrypt package