Don't use password_hash() for memcache key

Until API syncing is in place, the memcache key has to be generated on
every file sync request, and password_hash() is (deliberately) way too
slow for that. Instead, just use sha256(username + password), since
username functions as a salt anyway.