[web2py] How passwords are encrypted/hashed for storage in web2py

[David Bain]

I'm not sure how passwords are hashed in web2py. If it uses a token, where
is it stored.

I'm guessing that it uses something like this:

from hashlib import md5

token = 'insecure'

tokenizedHash = md5(password + token)

print tokenizedHash.hexdigest()