Yii password hashing