Allow passing options to password_hash().

Refs #3899
You are right. I misread the arguments.