Bump golang crypto package

[KauzClay]

• In response to a recent CVE, we would
  like to bump the cryto package to contain this
  fix

cc @ameowlia @adobley @bruce-ricard

[coveralls]

Pull Request Test Coverage Report for Build 99

• 0 of 0 changed or added relevant lines in 0 files are covered.
• No unchanged relevant lines lost coverage.
• Overall coverage remained the same at 83.019%

---

Totals
Change from base Build 97:	0.0%
Covered Lines:	264
Relevant Lines:	318

---

💛 - Coveralls

[coveralls]

Pull Request Test Coverage Report for Build 99

• 0 of 0 changed or added relevant lines in 0 files are covered.
• No unchanged relevant lines lost coverage.
• Overall coverage remained the same at 83.019%

---

Totals
Change from base Build 97:	0.0%
Covered Lines:	264
Relevant Lines:	318

---

💛 - Coveralls

[kozlovic]

Could we remove the go 1.14? I know it gets put there whenever you build from go 1.13+, but I still don't get why they had this.
Also, please do a go mod tidy so that it removes from the go.sum the references to the old crypto commit hashes.

[kozlovic]

We would like to do a release of the NATS Server that depends on this. So I will merge this and have another update if needed to do the tidy, etc..
Thanks for the contribution!