https://bornsql.ca/blog/convert-legacy-password-storage-without-aggravating-your-users/