http://security.stackexchange.com/a/31439/43688
https://www.reddit.com/r/PHP/comments/3lwxlw/hash_and_verify...