removed PHP-pbkdf2, require openssl or hash extension instead