Remove crypto_pwhash_scryptxsalsa208sha256_BYTES, support any output length.
A _BYTES macro will be more useful for the crypt()-like interface.