Password Storage, with client side encryption some day