enhc: switch default algo from sha256 to bcrypt