Hash passwords with scrypt instead of SHA1