add explicit dependency for `bcrypt-ruby`
better support for rails 4.x