add automatic OWASP suggestions for password hash iteration count