fix(api): use bcrypt directly instead of passlib for compatibility

web/node_modules/form-data/lib/populate.js

@@ -0,0 +1,10 @@
+'use strict';
+
+// populates missing values
+module.exports = function (dst, src) {
+  Object.keys(src).forEach(function (prop) {
+    dst[prop] = dst[prop] || src[prop]; // eslint-disable-line no-param-reassign
+  });
+
+  return dst;
+};