updated the password mechanism to use password_hash

resolves http://bugs.web2project.net/view.php?id=1171