What version are you running? Had the same problem before when I ran 0.10 (the .dmg from SourceForge). However, if you clone the latest version from GitHub, your should be fine.
Also, remember that if you use a "form Auth"– your password will be hashed automatically, remember to store your passwords hashed too.
