Constant-time password hashing, removed Flask dependency, PEP8, shebang, unicode, `from __future__`