Update docs for weak password hashing.

Refs cakephp/cakephp#5346
Fix typo.
Merge pull request #2091 from cakephp/weak-password-salt

Update docs for weak password hashing.