Replace BasicAuth with Authenticated;  fix salting an PasswordHasher; add FAQ