Lower dependence on OpenSSL

This release adds use of a native PBKDF2 function. Reliance on OpenSSL for the PBKDF2 function caused issues on Heroku -- it uses an older OpenSSL that does not allow non-SHA1 hash functions for pbkdf2_hmac.