Further strengthening of password hashing.
/R3 removed useless call to shuffle on a summed array.