[IMP] auth_crypt: port to passlib instead of using embedded/hand-rolled md5crypt