https://dusted.codes/sha-256-is-not-a-secure-password-hashing-algorithm