Use defaults for password_hash()ing

Let the algorithm, cost, & salt use PHP's defaults