bcrypt hash gpg passphrases

Implements https://github.com/freedomofpress/securedrop/issues/171 and adds a runtime test to check for salt collision.