Use something better than MD5 for passwords

[trs80]

Eg hash_pbkdf2 (in PHP since 5.5, with an implementation for 5.3 and 5.4 here https://gist.github.com/rsky/5104756 )