Simple replacement for Rails' has_secure_password