[support] How does Drupal generate the stored password