backwards-compatibility with md5

Automatically updates older, md5-hashed passwords to the new encryption
standard when users log in successfully.
Merge branch 'pr/7'