upd: use scrypt for new passwords.
add: implement password migration to scrypt on login.