switch to npm over submodules, remove crypto