fix bcrypt version