Password hashing and verification for Node using the built-in crypto.pbkdf2 (HMAC-SHA1).