You should specify the `cost` [parameter](http://bcrypt-ruby.rubyforge.org/classes/BCrypt/Password.html) here to ensure that it is cryptographically secure. I think 12 or 13 is good, but I haven't looked at the performance/security tradeoff yet.