Don't expose user password hashes over the network

This changes the getcrypt API to just return the salt.