User password hashing with blowfish