[FIX] Error when using invalid password
[IMP] Use a new salt for each password

If you already migrated to password hashes before this commit, use
https://gist.github.com/ThiefMaster/f98de207d54776c24239 once to
migrate your db without re-hashing the already hashed passwords
[FIX] Fail nicely in UserBase when not logged in