Allow usage of hashPassword outside of accounts-password package.

Since `sha` is an internal package and hashPassword is a private function that isn't exported, I have no clean way to hash a password before sending it to the server if I want to call createUser on the server side.

This seems less than ideal to force everyone to call Accounts.createUser client side.  Perhaps exposing Accounts.hashPassword would be cleaner for other account packages.