Fix password storage

Not solved

Passwords are stored as unsalted MD5. Replace it with a salted, slow key-derivation function and a constant-time check.

passwords.js

Test results

Run the tests to check your code. It runs on the server in an isolated sandbox with no network access.