
The password check of worker API calls was 2 orders of magnitude slower than actually handling the API call itself. Since the Worker authentication is not that important (it's all on the same network anyway, and Worker account registration is automatic too), lowering the BCrypt cost to the minimum helps. On my machine, this reduces the time for password checks from 50 to 2 ms.