Added OWASP link, ticked up bcrypt cost.