clarify bcrypt cost doc