store hashed passwords

Here are two attack vectors:
- Attacker manages to read the database on the server. They now have admin password and can delete music on the server.
- A groove basin bug is exploited and admin password is accidentally revealed. They now have admin password and can delete music on the server.

Solution: store hashed passwords in the database.