BCrypt is slow by design

[karlvr]

And it makes each request to Dave slow as well. Even reducing the cost of our bcrypt hash to 4, there's still 10ms or so more time spent on each request than we'd like! Maybe it's not the ideal hash for this app!