Replacing app usages of phpass with password_compat