Add automatic rehash of an obsolete password hash on login.

Initially, this will convert old md5 hashed passwords to blowfish. As time goes on, any updates to the recommended best hash (on PHP upgrade for example) will trigger a rehash as well.