Dropped unnecessary dependency on password-hash module, we're talking to crypto directly for those legacy A1.5 passwords