Replace password hasing with Bcrypt implementation
Also check the old password format and upgrade passwords on verification.