SSHA as default password-hash in next password change