Increase bcrypt cost

[0xdabbad00]

You use a bcrypt cost of 8 (https://github.com/apexskier/httpauth/blob/master/auth.go#L177). Go's default bcrypt cost is 10 (https://github.com/golang/crypto/blob/master/bcrypt/bcrypt.go#L23). Not really an important issue. You may want to make this configurable.

[apexskier]

Thanks for the update. I'm still going to hard code for now, because I don't know how I'd implement the configuration off the top of my head. Pull requests are welcome, of course.

[0xdabbad00]

May be relevant to point out that this is a breaking change with previous code, because if someone upgraded your library to this update, they would need to re-generate hashes.

[apexskier]

Thanks!

[0xdabbad00]

Looks like a couple more spots need to be updated.

• httpauth/examples/server.go

  Line 41 in f1b3ec5

  hash, err := bcrypt.GenerateFromPassword([]byte("adminadmin"), 8)

• httpauth/auth.go

  Line 219 in f1b3ec5

  hash, err = bcrypt.GenerateFromPassword([]byte(username+p), 8)