Hash and salt the password on the client side.

This is just to prevent the 'I use the same password everywhere'
problem. The password is hashed and salted on the server as well.