Provide secure password hashes

As suggested by pwolanin, let's use secure password hashes in Commons by default. The current simple MD5 hashes are vulnerable to attack with rainbow tables, which is particularly easy if someone gets hold of a database dump.