Use sha256 as passwort hashing algorithm and use correct salt. The solution is backward compatible.
(the $PREFIX_account table needs a column 'salt CHAR(64))

Replaced random values generator with a potentially crytographic strong one.
add salt to sql-files
Merge pull request #1132

Fixes #1132: Switch to sha256 password hashing