agree. it's too bad that Django, out-of-the-box, is still using SHA1+salt. it'd be nice to see it switch to bcrypt or something similar.