Increased strength of password hashing for storage

Switch password hashing from the default "insecure" crypt to the "more secure" bcrypt using CPU cost of 4

Leaving CPU cost at the default of 10 significantly slowed down each page load and significantly increased the CPU load average. User can adjust the CPU cost

Adjusted password text field from visible plaintext to use * for each character

Source for insecure/more secure htaccess password storage: http://httpd.apache.org/docs/current/misc/password_encryptions.html

Source for properly implementing bcrypt prior to PHP 5.5: http://stackoverflow.com/a/6337021