lockdown passwordStretching parameters
Merge pull request #403 from dannycoates/i401

lockdown passwordStretching parameters