Use same key as casework and fixtures in dev and heroku env so
that user accounts can be fixtured up.

Change password hashing to use bcrypt.