Replace SHA256 password hash algorithm with PBKDF2