Document password truncation with BCryptPasswordHasher