Add a hashing algorithm for passwords

Salting and hashing passwords is essential for security.
First, try bcrypt if available, and fall back to sha1 hashing.
This will need to be added to account creation as well, so passwords written to the DB gets salted+hashed