change password encrytpion to bcrypt

This patch is only really relevant in the case that a system has been compromised and database content stolen. It shows that the site administrators took security seriously and have made cracking the password database as difficult as reasonably possible. We don't want users of our code to look like idiots - something that would only reflect badly on developers.