bcrypt back to 3.0.0