Move to bcrypt, deprecate salted sha1 the same way we deprecated md5