Typo in entropy
Use * for wildcard version instead of X
Looks like the refactor missed this call.
Make the Auth::attempt hash configurable.