Uses PBKDF2-SHA256 instead of plain SHA256

Fixes #192