More secure password hashes with PHPASS
Import phpass 0.3
Rewrite config.php with password hashes
Enable secure hashing by default, unless explicitly disabled.
Sessions are independent of passwords
Gently notify the user when config.php is unwritable
Minor typographical fixes
Fixing and improving stuff on @nicwaller's patch

- works with "login" => "pass" and 'login' => 'pass'
- works with malformed arrays
- works with any password & special chars
- better error reporting
- l10n instead of hardcoded strings
- less var declared
Update comments about auto-encrypting passwords
More checks, a few comments, and the phpass test file
Further improvements

- offload phpass functions to their own reusable functions
- clean option table after config has been hashed