Bcrypt is now the default password hashing method