migrate old passwords to new encryption format as user signs in