Update docs for weak password hashing.

Refs cakephp/cakephp#5346