https://blog.mango.im/posts/go-web-password-hashing/