bcrypt cost 12 (on abuse pas trop)