Save passwords as bcrypt instead of plain SHA-1 hashes (includes migration of old...