Make all password hashing & salting happen server side