Updates for compatibility with v2.4

The AuthComponent::password is being deprecated and calling it causes errors if you use 'blowfish' as Security::$hashType. If it needs to be a specific hash then it should be passed in as a second parameter