Make the bcrypt call more expensive, the PHP 5.5 default is 10, ZF2 default is 14