Add rake task to check for deprecated password hashes

I'd like to get this into the next release so that we can use it in a _later_ release (probably 3.0) as a pre-upgrade step. This will allow us to purge the deprecated-password logic, including the entire use of `config.salt`, in the later release. That logic should not have remained in the code base for more than one version.