Switch from bcrypt to pbkdf2 for user password hashing

Pbkdf2 has the advantage of being part of node, which should improve
cross-platform compatibility. The bcrypt module does not appear to
support Windows.

Also, the most recent bcrypt module threw errors until node rebuild
had been issued. Avoiding that should help future application updates
go more smoothly.