Remove bcrypt as dependency

That we know of only a token is ever passed for authentication, never a user/passwd,
so there is no need for bcrypt.