Protocol: auto-convert old passwords during secure login