Was tested in combination with preceding diff:
1. Log out on the web app
2. Check out a version of `master` with `397b4542fa7b38d8468038d74f3de84969f9dc36` and `12d02949bb4bb44a129163def1a7a056a7791b74` reverted
3. Log back in on the web app
4. Confirm that I have a `bcrypt` hash by running `SELECT * FROM cookies ORDER BY last_used DESC LIMIT 1` in MariaDB console
5. Close web app tab, kill `keyserver`, and check out `master` + this diff + preceding diff
6. Open web app tab again
7. Confirm that I have a `sha256` hash by rerunning query from step 4
8. Confirm that the cookie ID is the same between steps 4 and 7