SHA-256 password before bcrypt

This avoids the bcrypt limitation of only using the first 72 characters
of the password. Idea borrowed from OpenBSD bcrypt_pbkdf().