remove bcrypt from, add scrypt to, pip requirements
rename salt to pepper to clarify usage