Bump the default cost factor for bcrypt from 8 to 10