CBCrypt: Encrypt from the client rather than send passwords to servers