Use Hmac instead of hash for storing user passwords.