If your database leaked today, would your users' passwords be exposed? Most apps — yes. Here's how to fix that.