migrate to bcrypt for password storage
bcrypt had bugs before 5.3.7
Merge pull request #427 from shish/bcrypt

Use bcrypt for password storage