Switch to PBKDF2

This is quite a bit more secure, and a lot less stupid.