We should store passwords securely

[PeteyPii]

ie hash them and salt them. We should probably use some kind of library to do this for us

[PeteyPii]

Used passlib to do this. We hash using bcrypt_sha256. Unfortunately, getting a C implementation of the bcrypt backend proved to be impossible on Windows, so we use the python backend which is really slow so the number of rounds was lowered to compensate for this. Security is slightly lowered, but this can be adjusted in the future (without a database upgrade too).

Databases need to be recreated after this.

5f51fc9