Add password_needs_rehash function