I was reading up on password hashes for my new startup, orakl. apparently they're supposed to take a really long time?