https://andreiclinciu.net/the-real-solution-to-password-hash-complexities-and-how-to-avoid-ddos-ing-your-services