http://blog.ircmaxell.com/2012/12/seven-ways-to-screw-up-bcrypt.html