Update docs for weak password hashing.

Refs cakephp/cakephp#5346
Thanks. Fixed now.