Minor edit:

```
``BCryptPasswordHasher`` does not have any special handling and
thus is also subject to this hidden password length limit. To combat
``BCryptSHA256PasswordHasher`` fixes this by first first hashing
the password using sha256. This prevents the password truncation
and so should be preferred over the ``BCryptPasswordHasher``.
```