* More secure password hashes Use PHP 5.5 password_hash(), currently uses bcrypt increase password field length as per php documentation * Use password_hash()/password_verify() for cookies too * forgot to update db_schema.yaml