Cryptography:: class in installer

The installer is currently still using `sha1()` when it creates the default user. This is no problem as the password is instantly transformed into one generated by `Cryptography::hash()` as soon as the user logs in.

Still, the initial password should not require a migration but be done properly during installation. This PR fixes that.