migrate crypto-js to 3.1.2