[galaxy-dev] disable PBKDF2, revert to SHA1