Password hashing using crypto.pbkdf2Sync

UserModel.js

/*
 * Password are never stored as plain-text.
 * Instead, their one-way hashes are stored along with a unique salt.
 * This means that not even the DB owner can reverse-engineer the plain passwords
 */
static hashPassword(password, salt) {
    if (!password) throw new Error('Missing password argument');
    if (!salt) throw new Error('Missing salt argument');

    return crypto.pbkdf2Sync(password, new Buffer(salt, 'base64'), 10000, 64, 'sha512').toString('base64');
}