Move to simply bcrypt instead of bcrypt + sha1

bcrypting a sha1 hash is less secure than simply using bcrypt on a password. This also means that client side hashing is gone, as we cannot send hashed passwords and then use simple bcrypt. Ideally, client side hashing should be replaced by SSL which'd be more secure against SSL.

Signed-off-by: Shitiz Garg <mail@dragooon.net>