TODO: compare @nicwaller's PR with phpass with future function password_hash() and its compat lib maintained here: https://github.com/ircmaxell/password_compat

Edit: this function is PHP >= 5.3.7. Ponder when stats from api.yourls.org indicate it's OK to deprecated 5.2