Use bcrypt for passwords, which is more secure and salts automatically