Allow passing options to password_hash().

Refs #3899
This option should probably be added to the doc block.