downgrading bcrypt