change password hash to pbkdf2