Allow passing options to password_hash().

Refs #3899
Not sure what's your point. `hashOptions` defaults to array.