Fixed timeouts(!) and added bcrypt support

To make up for my dumb mistake, players no longer lose location on timeout kick and bcrypt is now an option for password storage (using jBCrypt).