Use libsodium pwhash for scrypt when usable

scrypt: salt and hash lengths exactly 32, r & p powers of two
scrypt_mcf: random salt, prefix $7$, r & p powers of two

Fixes #1