Add configuration option pepper for passwords validated with bcrypt

Hi, 

We are using this adapter on a password field generated with devise (with pepper). With this addition everybody can authenticate with Devise generated passwords.

Oh, and there is a fix for a case when there is no extra attribute mapping given.