Use hash+salt for storing passwords.

[fooker]

Currently, a users password is hashed without a salt for storing in the database.

The code uses 'hashlib' for this, which does not support salt handling. 'passlib' allows hashing with a salt.