Use bcrypt instead of MD5 to hash passwords