Constant-time password hashing, removed Flask dependency, PEP8, shebang,...

... unicode, `from __future__`