How about using a tested login library instead and consider using OAuth as well (e.g. Google account to login)?

Rolling your own login system, dealing with hash functions and checking passwords yourself is far too low level and dangerous for most apps (as this thread demonstrates).