replaces sha passwords to pbkdf2