new version of secure-password-hash