deprecate in favour of PHP's internal password hashing and better password_compat library