hashPassword is a method of the apostrophe module so we can manage a single consistent implementation. TODO: would be good to move checkPassword here as well, although right now that is already happening in just one place. We might want to check a password somewhere other than appy.