Save encrypted passwords

Instead of a password field, save a salt and a hash
Cycle hash and salt on each login

Whenever a user logs in, change salt and hash for the same provided
password.