Use SHA-512 algorithm for password hashes.

Passwords are currently salted with usernames. This is -ok-, but random
salt would be a lot better.