buddy-hashers in handlers/sign_in.clj ?

[jaromil]

While most functions are moved inside just-auth, the password derivation (KDF) is still done inside this code by hashers/derive and hashers/check. Shouldn't it be moved also inside just-auth and made implicit? In no occasion passwords should be handled without a derivation anyway,