Use hashed password

This is incompatible with Fastladder's hashing and salt.
Use upstream Flask-SQLAlchemy master branch