On password hashing and authentication in general

[oxdef]

From "Non-Functional Requirements":

The hashing of the user passwords is to be migrated to a hashing procedure that corresponds to the state of the art.

I suggest to stop using passwords and in-house authentication. It is hard to make and maintain in secure. Better approach is to leverage on well known 3rd party platform which provides better account security, e.g. GitHub (see Building a "Login with GitHub" button with a GitHub App) and do not waste time on it at all.