Helper functions for password-based key derivation, client-side signing and server-side verification for webapps for JSON-based APIs.