Hash passwords client-side before they go over the wire.