Improvements to crypto-password.

Following the advice @abedra gave at Clojure/West '14, I have done the following things:

* Increased default iterations of PBKDF2 to 100,000
* Implemented support for HMAC

Let's all work on this together and make `crypto-password` better.

Suggestions welcome.