Switched to bcrypt for hashing passwords

- User passwords will be rehashed with the new algorithm the next time
  they log in

JIRA: SPB-49