https://www.sindastra.de/p/1497/why-you-probably-shouldnt-double-hash-passwords-and-some-thoughts