updated to note use of PBKDF2