Password hashing and verification using Node's built-in crypto.pbkdf2 (HMAC-SHA1).