replace hash algorithm

[senner007]

https://stackoverflow.com/questions/20186354/best-practice-of-hashing-passwords

https://github.com/riverrun/comeonin/wiki/Choosing-the-password-hashing-algorithm