Added info about blowfish hash generation removal from Security::hash().

You might want to mention using `password_hash()` which is provided by a compatibility library that CakePHP uses.