http://yorickpeterse.com/articles/use-bcrypt-fool/ http://codahale.com/how-to-safely-store-a-password/