unsalted sha256, customer A: bee5688aea66a474...
unsalted sha256, customer B: bee5688aea66a474...
identical?                   yes
PBKDF2 stored forms equal?   no
stored form length:          90 characters
A verifies with rahasia123?  yes
A verifies with rahasia124?  no
