Address CodeQL security issues

[jsjoeio]

See list of issues: https://github.com/cdr/code-server/security/code-scanning

Opening individual issues for each and linking here:

• Fix password hash to use sufficient computational effort #3381
• Sanitize error messages before writing to login page #3382
• Fix type confusion through parameter tampering #3750