removed dependency on pbkdf2-compat

pbkdf2 functions are available via crypto, both the regular one and crypto-browserify.
Thus pbkdf2-compat is an unnecessary.

Actually, not just unnecessary but harmful, it fails in browserified form due to a circular dependency.