Needs secure hashing of passwords

If you take a look at line 72 in controllers/login.py, you'll see a call to hash_it, defined in lib/utils.py, which simply calls md5() which is unsuitable for password hashing.

Please migrate to a secure hashing setup.

Originally reported by David Gilman at https://alioth.debian.org/tracker/index.php?func=detail&aid=314643&group_id=100127&atid=413115

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information