new default settings for hashing passwords