Allow passing options to password_hash().

Refs #3899
Its an array AFAIK - as third argument.