generate_hashes() should always return an array

See https://github.com/humanmade/WP-Remote-WordPress-Plugin/pull/36#discussion_r4542705