upgrade cipher to the latest version

Upgrade `cipher` to the latest version. I want to keep us tracking the more recent versions of packages, to reduce the amount of unnoticed technical debt that we accumulate.

TBR