Fix: Reasonable hash function implementation

To use the builtin (PHP>=5.5) password hashing functions set in
src/config/main.config.php the value of security.hash to PASSWORD_DEFAULT

If the function password_hash is'nt available, run the following:
> composer require ircmaxell/password-compat:1.0.*

If PASSWORD_DEFAULT or PASSWORD_BCRYPT isn't set at runtime, use there value: 1
The value MUST BE an integer.