Use BluefishPasswordHasher in the auth example

"a custom"  repeated. I would just remove that statement though. Rather mention that blowfish uses per user hash.