changed dependency to maintained version of bcrypt