The new scheme uses bcrypt and a random salt for each user. This is not compatible with old passwords. Fixes #13