Authenticator: password migration from sha1 to crypt