Hash and salt passwords using pbkdf2 and a random salt