Hash passwords as early as possible during password reset.