Use crypt() instead of sha for password hashing

The documentation (http://php.net/manual/en/faq.passwords.php) warns
against sha for passwords, and recommends crypt() instead.

The installation instructions should be updated accordingly.