anchor.diff:  | `:pbkdf2+blake2b-512` | Recommended | Password-Based Key Derivation Function 2 with blake2b-512
   | `:pbkdf2+sha512`   | Recommended | Password-Based Key Derivation Function 2 with SHA256
   | `:pbkdf2+sha3-256` | Recommended | Password-Based Key Derivation Function 2 with SHA3-256
  -| `:bcrypt+sha512`   | Recommended | BCrypt password hasher combined with sha512 (see release notes for more information about that).
  +| `:bcrypt+sha512`   | Recommended | BCrypt password hasher combined with sha512 (default).
   | `:pbkdf2+sha256`   | Yes | Password-Based Key Derivation Function 2 with SHA256
   | `:bcrypt+sha384`   | Yes | BCrypt password hasher combined with sha384
   | `:pbkdf2+sha1`     | Yes | Password-Based Key Derivation Function 2 (as defined in RFC2898)
  
positive.code: 
  
  === Rehash Hook
  
  
  Choice a strong algorithm is important thing, but have a good update
  password-hashes policy is also very important and usually completelly forgotten.
  
negative.code: [source,clojure]
  ----
  ;; Generate hash from plain password
  (hashers/derive "secretpassword" {:alg :pbkdf2+sha256))
  ;; => "pbkdf2+sha256$4i9sd34m..."
  
  (hashers/check "secretpassword" "pbkdf2+sha256$4i9sd34m..."))
  