hash password with pbkdf2
Merge pull request #158 from davychiu/master

hash password with pbkdf2