hashPassword now uses bcrypt (single arg), not SHA-256 (password+salt). The old call silently ignored the salt param but was misleading.
hashPassword now uses bcrypt (single arg), not SHA-256 (password+salt). The old call silently ignored the salt param but was misleading.