Use bcrypt for passwords.