Transition to using bcrypt for password hashing/storage