https://tiloid.com/p/secure-hash-and-salt-for-php-passwords