[config] Add security config file

Add a configuration file to store and centralize some security settings of the application.

The (currently) only option is the cost factor of the hash algorithm.