argon2 password hashing (#406)