Issue #3277003: Harden user_pass_rehash() against attack

Drew Webberrequested to merge
issue/drupal-3277003:3277003-user-pass-rehash into 11.x

Closes #3277003

Merge request reports