Upgrade crypt_blowfish to 1.3

I would like an opinion on whether this is a security fix, which affects it being merged to 5.4

Version 1.3 addresses: [OpenBSD bcrypt 8-bit key_len wraparound](http://www.openwall.com/lists/oss-security/2012/01/02/4)

I have received and followed some [advice from Solar Designer](http://www.openwall.com/lists/crypt-dev/2014/10/07/1) on implementing this change.

During implementation I added some tests that were missing from the official test suite, which actually failed. I have made some further changes to address these failures, and while all of the other existing tests still pass, I would again like an opinion on whether this is considered a BC break, or a bug fix. (I feel it is the latter)

Thanks.