[server] Fix password security problems.
* Use PBKDF2+SHA256 for hashing
* Use different salt for each user.