Fix a _potential_ flaw in password_hash()
Add CI_Encryption::create_key()

This was planned, we somehow forgot about it. :)