Handle bcrypt password hashes

And always use a single DB query for auth
Serve v1 to ZotPad 1.x, at mronkko's request
Fix format=bib with no results