The password hashing stuff should be really nice in the long run--at least when it's widely used.

PHP in particular seems to have a lot of bad home brew implementations out there, so it'll be nice to have a better default.