PBKDF2 for password hashing, RNG crypto for password salt

Goodbye, sha1!