Usage of PHP 5.5 hashing functions (with fallback for 5.4, smooth upgrade from previous passwords hashing present).
Removed `sleep()` calls for preventing access to some pages, because this may be used for DoS.
Methods `User::set_password()` and `User::validate_password()` added as centralized methods for password management.