Switch from cryptacular to bcrypt for local p/w

Using the bcrypt module instead avoids the unused pbkdf dependency. The
API is also dead simple. The need for a random string helper is removed
by `bcrypt.gensalt`.