add comment for bcrypt-ruby 3.0.0

Comment from /. "It seems like something, somewhere is specifying bcrypt-ruby (~> 3.0.0)"