Using SHA256 when storing passwords in DB