fixes #2650: updated blog tutorial to use CPasswordHelper
fixes #2651: CHttpSession wasn't using GC probability/divisor from php.ini